AbuseIPDB » 52.139.155.143

Check an IP Address, Domain Name, or Subnet

e.g. 34.236.192.4, microsoft.com, or 5.188.10.0/24

52.139.155.143 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	Hong Kong
City	Hong Kong, Hong Kong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 52.139.155.143

Whois 52.139.155.143

IP Abuse Reports for 52.139.155.143:

This IP address has been reported a total of 124 times from 59 distinct sources. 52.139.155.143 was first reported on June 22nd 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Major Hostility	07 Jul 2022	"GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /vend ... show more"GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /vendor/phpunit/phpunit/phpunit.xml HTTP/1.1" 404 "GET /administrator/ HTTP/1.1" 404 "GET /admin/view/javascript/common.js HTTP/1.1" 404 show less	Web App Attack
Anonymous	06 Jul 2022	Attempt to access admin on my wordpress site.	Hacking
raspi4	06 Jul 2022	Fail2Ban Ban Triggered	Brute-Force Web App Attack
expandmade.com	06 Jul 2022	[bie] - unauthorized rest api call [06/Jul/2022:23:06:11 "GET //wp-json/wp/v2/users/"]	Web App Attack
CryptoYakari	06 Jul 2022	52.139.155.143 - - [06/Jul/2022:23:40:01 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 375 ... show more52.139.155.143 - - [06/Jul/2022:23:40:01 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 3759 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 52.139.155.143 - - [06/Jul/2022:23:40:01 +0300] "GET //xmlrpc.php?rsd HTTP/1.0" 404 371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 52.139.155.143 - - [06/Jul/2022:23:40:02 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3759 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 52.139.155.143 - - [06/Jul/2022:23:40:03 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3759 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 52.139.155.143 - - [06/Jul/2022:23:40:03 +0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.0" 404 37 ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
Database.red	06 Jul 2022	[2022-07-06 15:17:10] Exploit probing - //wp-includes/wlwmanifest.xml	Hacking Brute-Force Web App Attack
Epimetheus	06 Jul 2022	Unauthorized access attempts: From: 52.139.155.143 Method: H ... show moreUnauthorized access attempts: From: 52.139.155.143 Method: HTTP GET URI Path: /news/wp-includes/wlwmanifest.xml UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" show less	Web App Attack
Dolphi	06 Jul 2022	POST //xmlrpc.php	Brute-Force Web App Attack
ghostwarriors	06 Jul 2022	Attempts against non-existent wp-login	Brute-Force Web App Attack
Maykson	06 Jul 2022	52.139.155.143 - - [06/Jul/2022:08:53:54 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 200 103 ... show more52.139.155.143 - - [06/Jul/2022:08:53:54 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 200 1038 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Exploited Host Web App Attack
bernd	06 Jul 2022	VPN IP	VPN IP
Maykson	06 Jul 2022	52.139.155.143 - - [06/Jul/2022:07:48:36 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 549 ... show more52.139.155.143 - - [06/Jul/2022:07:48:36 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Exploited Host Web App Attack
mawan	06 Jul 2022	Suspected of having performed illicit activity on AMS server.	Web App Attack
nextweb	06 Jul 2022	(PERMBLOCK) 52.139.155.143 (HK/Hong Kong/Central and Western District/Central/-/[AS8075 MICROSOFT-CO ... show more(PERMBLOCK) 52.139.155.143 (HK/Hong Kong/Central and Western District/Central/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]) has had more than 4 temp blocks in the last 86400 secs show less	Brute-Force
JCB	06 Jul 2022	/wp-includes/wlwmanifest.xml	Brute-Force Web App Attack